Cisco 350-501 Online Practice Questions and Exam Preparation

Cisco 350-501 Online Questions & Answers

• Question 81:

  Refer to the exhibit.

  

  An organization s network recently experienced several significant outages due to device failures. The network administrator just moved the network devices to a new central data center, and packets are switched using labels. The administrator Is now implementing NSF on the network to reduce potential risk factors in the event of another outage.

  Which task must the administrator perform on each router as part of the process?

  A. Remove route filtering to speed repopulation of the link-state database
  B. Copy the router s existing state information and share the file with its peers to enable BGP soft resets
  C. Implement MPLS to forward packets while the RIB updates after a faliover.
  D. Implement Graceful Restart to mitigate the delay in MPLS LDP synchronization when the IGP starts up.
  D. Implement Graceful Restart to mitigate the delay in MPLS LDP synchronization when the IGP starts up.

  ---

  Explanation

• Question 82:

  Refer to the exhibit.

  

  Router R1 is configured with class map CE with match ip precedence critical to align with customer contract SLAs. The customer is sending all traffic from CE1 toward the FTP server with IP precedence 5. A network engineer must allow 10% of interface capacity on router R3.

  Which two actions must the engineer take to accomplish the task? (Choose two.)

  A. Implement a class map on R3 to match all packets with QoS IP precedence value 011.
  B. Implement a class map on R1 to match all packets with QoS IP precedence value 100.
  C. Apply a policy map to R3 to reserve 10% of interface bandwidth.
  D. Apply a policy map to R1 to reserve the remaining 10% of interface bandwidth.
  E. Implement a class map on R3 to match all packets with QoS IP precedence value 101.
  C. Apply a policy map to R3 to reserve 10% of interface bandwidth.
  E. Implement a class map on R3 to match all packets with QoS IP precedence value 101.

  ---

  Explanation

• Question 83:

  How can a network administrator secure rest APIs?

  A. They can have a general administrator login for multiple users to access that has command entries logged.
  B. They can authenticate user sessions and provide the appropriate privilege level.
  C. They can ensure that user sessions are authenticated using TACACS+ only.
  D. They can allow read and write privileges to all users.
  B. They can authenticate user sessions and provide the appropriate privilege level.

  ---

  Explanation

  To secure REST APIs, a network administrator should ensure that user sessions are authenticated and that the appropriate privilege level is provided for each user. This means that each API request should come with authentication credentials, and the server should validate these credentials for every request. This approach helps to maintain the stateless nature of REST APIs and ensures that only authorized users can access or modify resources. References: Best practices for securing REST APIs include using HTTPS, token-based authentication, and proper validation of input parameters to prevent common security vulnerabilities.

• Question 84:

  Refer to the exhibit

  

  A network engineer is in the process of implementing IS-IS Area 1 and Area 2 on this network to segregate traffic between different segments of the network. The hosts in the two new areas must maintain the ability to communicate with one another In both directions.

  Which additional change must be applied?

  A. Reconfigure either R3 or R4 as a Level 1/Level 2 router.
  B. Reconfigure routers R1, R2 R5. and R6 as Level 1/Level 2 routers.
  C. Reconfigure routers R2 and R5 as Level 1/Level 2 routers.
  D. Reconfigure routers R4, R5 and R6 as Level 1 routers
  A. Reconfigure either R3 or R4 as a Level 1/Level 2 router.

  ---

  Explanation

• Question 85:

  Which module refers to the network automation using Ansible?

  A. the iosxr_system module to collect facts from remote devices
  B. the iosxr_user module to manage banners for users in the local database
  C. the losxr_logging module to run debugging for seventy levels 2 to 5
  D. the iosxr_command module to issue run commands on remote devices
  D. the iosxr_command module to issue run commands on remote devices

  ---

  Explanation

  The iosxr_command module in Ansible is used to issue commands on remote devices running Cisco IOS XR. This module allows network administrators to execute operational commands on Cisco routers and switches, which is essential for tasks such as retrieving information or applying configuration changes. It is a part of network automation using Ansible, which simplifies the management of network devices by automating repetitive tasks.

  https://docs.ansible.com/ansible/latest/collections/cisco/iosxr/iosxr_command_module.html #ansible-collections-cisco-iosxr-iosxr-command-module

• Question 86:

  Refer to the exhibit.

  

  An engineer configured multicast routing on client's network. What is the effect of this multicast implementation?

  A. R2 floods information about R1 throughout the multicast domain.
  B. R2 is unable to share information because the ip pirn autorp listener command is missing.
  C. R1 floods information about R2 throughout the multicast domain.
  D. R2 is elected as the RP for this domain.
  A. R2 floods information about R1 throughout the multicast domain.

  ---

  Explanation

• Question 87:

  An engineer is configuring IEEE 802. 1ad on the access port on a new Cisco router. The access port handles traffic from multiple customer VLANs, and it is expected to mark allcustomer traffic to the same VLAN without dropping any traffic.

  Which configuration must the engineer apply?

  A. interface gigabitethernet0/0/1ethernet dot1ad uni s-port
  B. interface gigabitethernet0/0/1ethernet dot1ad uni c-port
  C. interface gigabitethernet0/0/1ethernet dot1ad uni nni
  D. interface gigabitethernet0/0/1encapsulation dot1q 10
  A. interface gigabitethernet0/0/1ethernet dot1ad uni s-port

  ---

  Explanation

• Question 88:

  What Is the primary role of Ansible In a network?

  A. It is used as a debugging tool for connectivity issues between the DMZ and an enterprise intranet.
  B. It Is used to diagnose Layer 11ssues In data centers that span more than one city block.
  C. It is used to deploy IPv6 configuration is networks That are dual slack.
  D. It is used as a network automation provisioning and configuration tool.
  D. It is used as a network automation provisioning and configuration tool.

  ---

  Explanation

  Ansible is widely recognized as a robust network automation tool that facilitates provisioning, configuration, and management of network devices. It uses simple, human-readable YAML syntax for its playbooks, making it easy to define tasks and orchestrate workflows for automated network operations.

• Question 89:

  Refer to the exhibit.

  

  Customer_A asked ISP_A to connect two offices via an MPLS L3 VPN. Customer_A is currently using only the default route toward ISP_A. The engineer at ISP_A already configured the ip route vrf Customer_A 172.16.10.0 255.255.255.0 10.10.10.1 command on R1. Which action completes the configuration?

  A. Configure the redistribute static and redistribute connected commands on R1.
  B. Enable the bgp default route-target filter and default-information originate commands under the global BGP configuration on R2.
  C. Configure the route-target both 200:1 and route-replicate vrf Customer_A commands under the ip vrf configuration on R2.
  D. Configure the network 172.16.10.0 and redistribute-internal static commands under the BGP address family for Customer_A in the global BGP configuration on R1.
  A. Configure the redistribute static and redistribute connected commands on R1.

  ---

  Explanation

• Question 90:

  Refer to the exhibit

  

  Which three outcomes occur if the prefix list is added to the neighbor? (Choose three.)

  A. 192.168.0.0/16 is denied.
  B. 192.168.0.0/16 is permitted.
  C. 192.168.0.0/19 is permitted
  D. 192.168.0.0/19 is denied.
  E. 192.168.0.0/17 is permitted
  F. 192.168.0.0/17 is denied.
  A. 192.168.0.0/16 is denied.
  C. 192.168.0.0/19 is permitted
  E. 192.168.0.0/17 is permitted

  ---

  Explanation

  192.168.0.0/16 is denied.

  192.168.0.0/19 is permitted 192.168.0.0/17 is permitted E: 192.168.0.0/17 is permitted as it matches the statement "greater or EQUAL 17", so it's a match and it terminates in the "permits" statement of the ALLOW prefix list